5540-PA1 receviced many log:Duplicate TCP SYN frominside 1.1.1.1/32774 to outside :2.2.2.2/2049 with different initial sequence number.At the same time,NFS client(A site) can not mount remote NFS server(B site).After several minutes ,the cli...
Forum Posts
Resolved! Running FirePower on VMware workstation
Hi, Has anyone Tried to run FirePower on VMware workstation, I'm trying to practice and test the platform, but I'm unable to make it work on VMware. If someone has done it before, kindly help. Thanks Sulaiman
I'm having problems deploying Default Access Control Policy. I didn't add any rules to begin with. Warning before proceeding deploy: Access Control PolicyDefault: No access control rules configured. Improve performance by setting this access control ...
Based on information found here and other websites I've attempted to setup logging on my ASA to monitor for configuration changes and send those to my Syslog server, however i'm not showing any results. Below is the output displaying what we have se...
Resolved! ACL
Hi All, I have couple of queries in the below output. Please clarify the same. Firewall ACL output:access-list inside line 115 extended permit ip object-group X any4 log informational interval 300access-list inside1 line 77 extended permit ip object-...
Hi, What I'm trying are inserting rule into section, category, placing of the rule as top of the category. I have tried it on api-explorer, it is not that complete and it been a guess/ blind testing from my end. Below are the parameters I tried in ap...
Thanks,Miquel
Hi guys, I have an issue whereby we have changed DHCRELAY servers to a new one and for some reason I cannot seem to get any requests for a specific interface...The debugs show that the requests are sent to the correct servers, but devices still canno...
Resolved! Software Bug Fix
Hello, A really simple one I think.... we have a PCI scan done and a software Vulnerability was found and I found the bug but I can't seem to locate a fix for it. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115...
Resolved! Help implementing FMC with AD and ISE
HelloI aim to implement FMC by utilising:1) Active Directory for creating Access Control rules based on AD Groups2) ISE as an Identity sourceI intend user's login ID should be visible in the all logs, also I do not want to use User agent as an Identi...
I'm in the process of setting up a management console (MC) in AWS to manage a bunch of PCoIP clients in our office. The networking between our AWS private cloud and our on-prem infrastructure is sound because everything else works. The MC virtual ins...
OK, I am new to Firewalls so excuse my ignorance. I am trying to perform the following scenario and need help.Scenario:Company A - 172.16.200.0/24Company B - 10.30.0.0/16I login to the VPN for Company A and I try to RDP to a file directory on Company...
Resolved! ASA 5515x Password Recovery issue
Hi our ASA 5515x password expired due to password Expiry limitation and unfortunately no service password-recovery command is enabled. is there any way we can recover password ? with or without losing existing configuration when we login on ASA it ...
Trying to understand better when I should use object NAT vs Manual. Which is the better way to configure NAT, Manual vs Auto/Object NAT, for internal servers that need to be reached from the Outside?
Is there a way to send a notification to an email or something like that when "logging host management" and/or syslog or audit server goes down?Also, what it the actual logging server number for just when the server is unreachable or however it detec...
